SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-90563

LOW · CVSS 3.5 Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-13 · Last synced 2026-09-13

CyberRota Analysis

AI-Generated

A cross-site scripting vulnerability exists in the utils.toToc function of ArticleController.java in maliangnansheng bbs-springboot version 3.0.0, allowing remote attackers to inject malicious scripts. While the severity is rated low (CVSS 3.5), organizations using this Java framework should prioritize patching to mitigate potential exploitation risks. Developers and security teams should assess their applications for this vulnerability to ensure user data and application integrity are protected.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-90563
Severity
LOW
CVSS
3.5
EPSS
N/A
Java

Original NVD Description

A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely.